@jini-ai/chat 0.5.4 → 0.5.6

package/dist/embed-widget/browser/page-actions.d.ts

@@ -1,121 +1,2 @@
-/** Resolved target supplied by the host; the client never derives a path from a title. */
-export interface ResolvedPageTarget {
-    readonly slug: string;
-    readonly title: string;
-    readonly path: string;
-}
-export type PageAction = {
-    readonly type: 'navigate';
-    readonly target: ResolvedPageTarget;
-    readonly auto: boolean;
-} | {
-    readonly type: 'scroll_to' | 'highlight';
-    readonly target: ResolvedPageTarget;
-};
-export type NavigateAction = Extract<PageAction, {
-    type: 'navigate';
-}>;
-export type NonNavigateAction = Exclude<PageAction, {
-    type: 'navigate';
-}>;
-export interface DirectiveCarryingEvent {
-    readonly kind: string;
-    readonly name?: string;
-    readonly data?: unknown;
-}
-export interface SplitPageActions {
-    readonly navigate: NavigateAction | null;
-    readonly other: NonNavigateAction | null;
-}
-/** Narrows an untrusted, bare queued action. URL authorization remains a separate host policy. O(1). */
-export declare function isQueuedPageAction(args: {
-    value: unknown;
-}): args is {
-    value: PageAction;
-};
-/** Narrows an untrusted directive envelope, dropping unknown kinds. O(1). */
-export declare function isPageActionDirective(args: {
-    value: unknown;
-}): args is {
-    value: {
-        kind: 'page_action';
-        action: PageAction;
-    };
-};
-/** Preserves valid action order while ignoring unrelated events. O(events) time and output space. */
-export declare function extractPageActions({ events, directiveEventName }: {
-    events: readonly DirectiveCarryingEvent[] | undefined;
-    directiveEventName: string;
-}): PageAction[];
-/** Returns only the first navigation and first page treatment. O(actions), O(1) extra space. */
-export declare function splitPageActions({ actions }: {
-    actions: readonly PageAction[];
-}): SplitPageActions;
-export interface TargetSelectionPolicy {
-    readonly candidateSelector: string;
-    readonly excludedAncestorSelector: string;
-}
-/** Exact title match first, case-insensitive fallback; never searches excluded UI. O(candidates). */
-export declare function findTargetElement({ title, root, selection }: {
-    title: string;
-    root: Pick<ParentNode, 'querySelectorAll'>;
-    selection: TargetSelectionPolicy;
-}): Element | null;
-export interface PageActionTimerPort {
-    schedule(args: {
-        callback: () => void;
-        delayMs: number;
-    }): unknown;
-    cancel(args: {
-        handle: unknown;
-    }): void;
-}
-export interface PageActionPort {
-    allows(args: {
-        action: PageAction;
-    }): boolean;
-    navigate(args: {
-        action: NavigateAction;
-    }): boolean;
-    execute(args: {
-        action: NonNavigateAction;
-    }): boolean;
-    clearHighlight(args: Record<string, never>): void;
-}
-export interface BrowserPageActionController extends PageActionPort {
-    applyHighlight(args: {
-        element: Element;
-    }): void;
-    scrollToElement(args: {
-        element: Element;
-    }): void;
-}
-export interface BrowserPageActionsArgs {
-    readonly root: Pick<ParentNode, 'querySelectorAll'>;
-    readonly selection: TargetSelectionPolicy;
-    readonly allowPath: (args: {
-        path: string;
-    }) => boolean;
-    readonly navigate: (args: {
-        path: string;
-    }) => void;
-    readonly reducedMotion: (args: Record<string, never>) => boolean;
-    readonly scroll: (args: {
-        element: Element;
-        options: ScrollIntoViewOptions;
-    }) => void;
-    readonly timers: PageActionTimerPort;
-    readonly highlightClass: string;
-    readonly fadeAnimationName: string;
-    readonly cleanupFallbackMs: number;
-}
-/**
- * Creates page effects with injected DOM, navigation, URL policy, scroll and timers.
- * At most one highlight belongs to this instance; cleanup and navigation remove it.
- * URL policy is checked before queueing, navigation or page effects. Stale timers and descendant
- * animation events cannot remove the current highlight. Navigation paths are resolved by the host,
- * never guessed from a title; each controller owns its mutable highlight state.
- * @complexity Execute O(candidates); other operations O(1), with one timer/listener retained.
- */
-export declare function createBrowserPageActions(args: BrowserPageActionsArgs): BrowserPageActionController;
+export * from '../../core/browser/page-actions.js';
 //# sourceMappingURL=page-actions.d.ts.map

package/dist/embed-widget/browser/page-actions.js

@@ -1,113 +1,3 @@
-function record(value) {
-    return typeof value === 'object' && value !== null && !Array.isArray(value);
-}
-function target(value) {
-    return record(value) && typeof value.slug === 'string' && typeof value.title === 'string' && typeof value.path === 'string';
-}
-/** Narrows an untrusted, bare queued action. URL authorization remains a separate host policy. O(1). */
-export function isQueuedPageAction(args) {
-    const { value } = args;
-    if (!record(value) || !target(value.target))
-        return false;
-    return value.type === 'navigate' ? typeof value.auto === 'boolean' : value.type === 'scroll_to' || value.type === 'highlight';
-}
-/** Narrows an untrusted directive envelope, dropping unknown kinds. O(1). */
-export function isPageActionDirective(args) {
-    const { value } = args;
-    return record(value) && value.kind === 'page_action' && isQueuedPageAction({ value: value.action });
-}
-/** Preserves valid action order while ignoring unrelated events. O(events) time and output space. */
-export function extractPageActions({ events, directiveEventName }) {
-    const actions = [];
-    for (const event of events ?? []) {
-        const envelope = { value: event.data };
-        if (event.kind === 'ext' && event.name === directiveEventName && isPageActionDirective(envelope)) {
-            actions.push(envelope.value.action);
-        }
-    }
-    return actions;
-}
-/** Returns only the first navigation and first page treatment. O(actions), O(1) extra space. */
-export function splitPageActions({ actions }) {
-    return {
-        navigate: actions.find((a) => a.type === 'navigate') ?? null,
-        other: actions.find((a) => a.type !== 'navigate') ?? null,
-    };
-}
-/** Exact title match first, case-insensitive fallback; never searches excluded UI. O(candidates). */
-export function findTargetElement({ title, root, selection }) {
-    const needle = title.trim();
-    if (!needle)
-        return null;
-    const candidates = Array.from(root.querySelectorAll(selection.candidateSelector))
-        .filter(el => !el.closest(selection.excludedAncestorSelector));
-    return candidates.find(el => (el.textContent ?? '').trim() === needle)
-        ?? candidates.find(el => (el.textContent ?? '').trim().toLowerCase() === needle.toLowerCase()) ?? null;
-}
-/**
- * Creates page effects with injected DOM, navigation, URL policy, scroll and timers.
- * At most one highlight belongs to this instance; cleanup and navigation remove it.
- * URL policy is checked before queueing, navigation or page effects. Stale timers and descendant
- * animation events cannot remove the current highlight. Navigation paths are resolved by the host,
- * never guessed from a title; each controller owns its mutable highlight state.
- * @complexity Execute O(candidates); other operations O(1), with one timer/listener retained.
- */
-export function createBrowserPageActions(args) {
-    if (!Number.isFinite(args.cleanupFallbackMs) || args.cleanupFallbackMs < 0)
-        throw new Error('Invalid highlight deadline');
-    let current = null;
-    const clearHighlight = (_args) => {
-        if (!current)
-            return;
-        const old = current;
-        current = null;
-        args.timers.cancel({ handle: old.handle });
-        old.element.removeEventListener('animationend', old.onEnd);
-        old.element.classList.remove(args.highlightClass);
-    };
-    function highlight(element) {
-        if (current?.element === element)
-            return;
-        clearHighlight({});
-        const onEnd = event => {
-            if (event.target === element && event.animationName === args.fadeAnimationName)
-                clearHighlight({});
-        };
-        element.classList.add(args.highlightClass);
-        element.addEventListener('animationend', onEnd);
-        // Identity check makes even a late callback from a canceled timer harmless.
-        const handle = args.timers.schedule({ delayMs: args.cleanupFallbackMs, callback: () => {
-                if (current?.element === element && current.onEnd === onEnd)
-                    clearHighlight({});
-            } });
-        current = { element, handle, onEnd };
-    }
-    const scrollToElement = ({ element }) => {
-        args.scroll({ element, options: { behavior: args.reducedMotion({}) ? 'auto' : 'smooth', block: 'center' } });
-    };
-    return {
-        applyHighlight({ element }) { highlight(element); },
-        scrollToElement,
-        allows({ action }) { return args.allowPath({ path: action.target.path }); },
-        navigate({ action }) {
-            if (!args.allowPath({ path: action.target.path }))
-                return false;
-            clearHighlight({});
-            args.navigate({ path: action.target.path });
-            return true;
-        },
-        execute({ action }) {
-            if (!args.allowPath({ path: action.target.path }))
-                return false;
-            const element = findTargetElement({ title: action.target.title, root: args.root, selection: args.selection });
-            if (!element)
-                return false;
-            scrollToElement({ element });
-            if (action.type === 'highlight')
-                highlight(element);
-            return true;
-        },
-        clearHighlight,
-    };
-}
+// Compatibility path; shared page-action decisions belong to chat core.
+export * from '../../core/browser/page-actions.js';
 //# sourceMappingURL=page-actions.js.map

package/dist/embed-widget/react/embed.d.ts

@@ -1,7 +1,7 @@
 import type { ChatTransport } from '../../core/transport.js';
 import type { ChatPaneAgent } from '../../react/chat-pane.js';
 import type { BrowserSessionStore } from '../browser/session-store.js';
-import type { PageActionPort } from '../browser/page-actions.js';
+import type { PageActionPort } from '../../core/browser/page-actions.js';
 import type { EmbedHeaderCopy, EscapeKeyPort } from './header.js';
 export { EmbedChatHeader } from './header.js';
 export type { EmbedChatHeaderArgs, EmbedHeaderCopy, EscapeKeyPort } from './header.js';

package/dist/embed-widget/react/embed.js

@@ -5,7 +5,7 @@ import { isTerminalRunStatus } from '../../core/messages.js';
 import { ChatPane } from '../../react/chat-pane.js';
 import { ChatFab } from '../../react/components/ChatFab.js';
 import { JiniChatProvider } from '../../react/components/JiniChatProvider.js';
-import { extractPageActions, splitPageActions, isQueuedPageAction } from '../browser/page-actions.js';
+import { extractPageActions, splitPageActions, isQueuedPageAction } from '../../core/browser/page-actions.js';
 import { EmbedChatHeader } from './header.js';
 export { EmbedChatHeader } from './header.js';
 const shellStyles = `

package/dist/react/artifact-types.d.ts

@@ -1,22 +1,16 @@
 /**
  * @module artifact-types
  *
- * Minimal `ArtifactFile`/`ArtifactRenderer`/`RendererRegistry` shapes,
- * defined locally per this task's SCOPE NOTE: r4b calls the artifact-renderer
- * package `@jini-ai/artifacts-react`; the actual locked name
- * (`ADS-memory/reports/jini-port/extraction-plan.md` §3) is `@jini-ai/renderers-react`, which
- * is still a placeholder stub being built in a separate session. `chat-react`
- * needs these shapes now (for `useArtifactStream` and the `ArtifactFile`
- * field on `ProjectContextValue`), so they are defined here to the exact
- * shape r4b §2 specifies, with the intent that a future pass re-points every
- * import below at `@jini-ai/renderers-react`'s real exports once that package
- * lands, deletes this file, and removes the re-export from `index.ts`.
+ * Chat's public streaming artifact contracts, used by useArtifactStream and
+ * ProjectContextValue. The renderer implementation is available in @jini-ai/ui,
+ * but direct delegation would change this compatibility surface: chat registers
+ * mutably, resolves newest-first, returns unregister handles, accepts files
+ * without manifests and returns the matched file. UI's registry is immutable,
+ * replaces registrations by ID, requires a manifest and returns that manifest;
+ * its predicate and resolve signatures also pass hints as a separate option.
  *
- * TODO(renderers-react): replace this file's contents with
- * `export * from '@jini-ai/renderers-react'` (or the equivalent named
- * re-exports) once `@jini-ai/renderers-react` ships real `ArtifactFile`/
- * `ArtifactRenderer`/`RendererRegistry` implementations. Do not block this
- * package's other work on that package landing first.
+ * TODO(renderer-delegation): Coordinator must resolve these contracts before
+ * delegating to UI. A wildcard re-export is not a behavior-preserving migration.
  */
 import type { ArtifactManifest } from '../core/index.js';
 /** Generic artifact-file shape a host's project/workspace file maps onto. */

package/dist/react/components/QuestionForm.d.ts

@@ -1,3 +1,4 @@
+import { type UserTextRedactionOptions } from '../../core/user-text-redaction.js';
 import type { QuestionForm as QuestionFormType } from '../../core/index.js';
 export interface QuestionFormFileSubmission {
     questionId: string;
@@ -9,7 +10,7 @@ export interface QuestionFormHandle {
     /** Submit with no answers — every question is optional, so this records each as "(skipped)" and moves on. */
     skipAll: () => void;
 }
-export interface QuestionFormProps {
+export interface QuestionFormProps extends UserTextRedactionOptions {
     form: QuestionFormType;
     /** Whether the user can still submit answers — the host disables this once the turn is no longer the most recent one. */
     interactive: boolean;

package/dist/react/components/QuestionForm.js

@@ -1,4 +1,6 @@
 import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { CREDENTIAL_CARD_GUIDANCE, SECRET_REDACTED_NOTICE } from '../../core/user-text-redaction.js';
+import { useUserTextGuard } from '../hooks/useUserTextGuard.js';
 /**
  * @module QuestionForm
  *
@@ -13,15 +15,17 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
  * string wrapped in `useT()`.
  */
 import { forwardRef, useEffect, useImperativeHandle, useMemo, useState } from 'react';
-import { formatFormAnswers, formOptionValueForLabel } from '../../core/index.js';
+import { formatFormAnswers, formOptionValueForLabel, redactQuestionAnswers, isSecretQuestion, withoutSecretQuestionDefaults, questionTextInputProps, questionTextareaProps } from '../../core/index.js';
 import { useT } from '../hooks/context.js';
-export const QuestionForm = forwardRef(function QuestionForm({ form, interactive, submittedAnswers, hideInternalSubmit = false, draftAnswers, onReadyChange, onDraftChange, onAnswerChange, onSubmit }, ref) {
+export const QuestionForm = forwardRef(function QuestionForm({ form: incomingForm, interactive, submittedAnswers, hideInternalSubmit = false, draftAnswers, onReadyChange, onDraftChange, onAnswerChange, onSubmit, redactUserText, onSecretRedacted }, ref) {
     const t = useT();
+    const form = useMemo(() => withoutSecretQuestionDefaults({ form: incomingForm }), [incomingForm]);
+    const guard = useUserTextGuard({ ...(redactUserText ? { redactUserText } : {}), ...(onSecretRedacted ? { onSecretRedacted } : {}) });
     const initial = useMemo(() => buildInitialState(form, submittedAnswers, draftAnswers), [form, submittedAnswers, draftAnswers]);
     const [answers, setAnswers] = useState(initial);
     const [fileAnswers, setFileAnswers] = useState({});
     const locked = !interactive || !onSubmit || submittedAnswers !== undefined;
-    const currentAnswers = submittedAnswers ?? answers;
+    const currentAnswers = submittedAnswers ? redactQuestionAnswers({ form, answers: submittedAnswers }).answers : answers;
     useEffect(() => {
         setFileAnswers({});
     }, [form.id]);
@@ -51,8 +55,8 @@ export const QuestionForm = forwardRef(function QuestionForm({ form, interactive
             return;
         const next = { ...answers, [id]: value };
         setAnswers(next);
-        onDraftChange?.(draftSafeAnswers(form, next));
-        onAnswerChange?.(id, value);
+        onDraftChange?.(redactQuestionAnswers({ form, answers: draftSafeAnswers(form, next) }).answers);
+        onAnswerChange?.(id, redactQuestionAnswers({ form, answers: { [id]: value } }).answers[id]);
     }
     function toggleCheckbox(id, option, maxSelections) {
         if (locked)
@@ -64,7 +68,7 @@ export const QuestionForm = forwardRef(function QuestionForm({ form, interactive
         const next = has ? current.filter((v) => v !== option) : [...current, option];
         const nextAnswers = { ...answers, [id]: next };
         setAnswers(nextAnswers);
-        onDraftChange?.(draftSafeAnswers(form, nextAnswers));
+        onDraftChange?.(redactQuestionAnswers({ form, answers: draftSafeAnswers(form, nextAnswers) }).answers);
         onAnswerChange?.(id, next);
     }
     function updateCheckboxCustom(q, raw) {
@@ -79,11 +83,13 @@ export const QuestionForm = forwardRef(function QuestionForm({ form, interactive
             return;
         if (!ready)
             return;
+        const safe = redactQuestionAnswers({ form, answers }, { ...(redactUserText ? { redactUserText } : {}), onSecretRedacted: guard.notifyRedaction });
+        setAnswers(safe.answers);
         const files = collectFileSubmissions(form, fileAnswers);
         if (files.length > 0)
-            onSubmit(formatFormAnswers({ form: form, answers: answers }), answers, files);
+            onSubmit(formatFormAnswers({ form: form, answers: safe.answers }), safe.answers, files);
         else
-            onSubmit(formatFormAnswers({ form: form, answers: answers }), answers);
+            onSubmit(formatFormAnswers({ form: form, answers: safe.answers }), safe.answers);
     }
     function handleSkipAll() {
         if (locked || !onSubmit)
@@ -113,18 +119,18 @@ export const QuestionForm = forwardRef(function QuestionForm({ form, interactive
     }, [onReadyChange, locked, ready]);
     return (_jsxs("div", { className: `question-form${locked ? ' question-form-locked' : ''}`, "data-form-id": form.id, children: [_jsxs("div", { className: "question-form-head", children: [_jsx("span", { className: "question-form-icon", "aria-hidden": true, children: "?" }), _jsxs("div", { className: "question-form-titles", children: [_jsx("div", { className: "question-form-title", children: form.title }), form.description ? _jsx("div", { className: "question-form-desc", children: form.description }) : null] }), locked ? _jsx("span", { className: "question-form-pill", children: t('Answered') }) : null] }), _jsx("div", { className: "question-form-body", children: form.questions.map((q) => {
                     const value = currentAnswers[q.id];
-                    return (_jsxs("div", { className: "qf-field", children: [_jsxs("label", { className: "qf-label", children: [_jsx("span", { children: q.label }), q.required ? (_jsx("span", { className: "qf-required", "aria-label": t('required'), children: "*" })) : null] }), q.help ? _jsx("div", { className: "qf-help", children: q.help }) : null, q.type === 'radio' && q.options ? (_jsx("div", { className: "qf-options", children: q.options.map((opt) => (_jsxs("label", { className: `qf-chip${value === opt.value ? ' qf-chip-on' : ''}`, title: opt.description, children: [_jsx("input", { type: "radio", name: `${form.id}-${q.id}`, value: opt.value, checked: value === opt.value, disabled: locked, "aria-label": opt.label, onChange: () => update(q.id, opt.value) }), _jsx(OptionCopy, { option: opt })] }, opt.value))) })) : null, q.type === 'radio' && q.options && shouldRenderCustomChoice(q) ? (_jsx(CustomChoiceInput, { label: q.customLabel ?? t('Something else'), value: customSingleValue(q, value), placeholder: q.customPlaceholder ?? t('Type your own answer'), disabled: locked, onChange: (next) => update(q.id, next) })) : null, q.type === 'checkbox' && q.options ? (_jsx("div", { className: "qf-options", children: q.options.map((opt) => {
+                    return (_jsxs("div", { className: "qf-field", children: [_jsxs("label", { className: "qf-label", children: [_jsx("span", { children: q.label }), q.required ? (_jsx("span", { className: "qf-required", "aria-label": t('required'), children: "*" })) : null] }), q.help ? _jsx("div", { className: "qf-help", children: q.help }) : null, isSecretQuestion({ question: q }) ? _jsx("div", { className: "qf-help", children: t(CREDENTIAL_CARD_GUIDANCE) }) : null, q.type === 'radio' && q.options ? (_jsx("div", { className: "qf-options", children: q.options.map((opt) => (_jsxs("label", { className: `qf-chip${value === opt.value ? ' qf-chip-on' : ''}`, title: opt.description, children: [_jsx("input", { type: "radio", name: `${form.id}-${q.id}`, value: opt.value, checked: value === opt.value, disabled: locked, "aria-label": opt.label, onChange: () => update(q.id, opt.value) }), _jsx(OptionCopy, { option: opt })] }, opt.value))) })) : null, q.type === 'radio' && q.options && shouldRenderCustomChoice(q) ? (_jsx(CustomChoiceInput, { label: q.customLabel ?? t('Something else'), value: customSingleValue(q, value), placeholder: q.customPlaceholder ?? t('Type your own answer'), disabled: locked, onChange: (next) => update(q.id, next) })) : null, q.type === 'checkbox' && q.options ? (_jsx("div", { className: "qf-options", children: q.options.map((opt) => {
                                     const arr = Array.isArray(value) ? value : [];
                                     const on = arr.includes(opt.value);
                                     const maxed = q.maxSelections !== undefined && !on && arr.length >= q.maxSelections;
                                     return (_jsxs("label", { title: opt.description, className: `qf-chip${on ? ' qf-chip-on' : ''}${maxed ? ' qf-chip-disabled' : ''}`, children: [_jsx("input", { type: "checkbox", value: opt.value, checked: on, disabled: locked || maxed, "aria-label": opt.label, onChange: () => toggleCheckbox(q.id, opt.value, q.maxSelections) }), _jsx(OptionCopy, { option: opt })] }, opt.value));
-                                }) })) : null, q.type === 'checkbox' && q.options && shouldRenderCustomChoice(q) ? (_jsx(CustomChoiceInput, { label: q.customLabel ?? t('Something else'), value: customCheckboxValue(q, value), placeholder: q.customPlaceholder ?? t('Type your own answer'), disabled: locked, onChange: (next) => updateCheckboxCustom(q, next) })) : null, q.type === 'select' && q.options ? (_jsxs("select", { className: "qf-select", value: typeof value === 'string' && questionValueIsKnown(q, value) ? value : '', disabled: locked, onChange: (e) => update(q.id, e.target.value), children: [_jsx("option", { value: "", disabled: true, children: q.placeholder ?? t('Choose one') }), q.options.map((opt) => (_jsx("option", { value: opt.value, title: opt.description, children: opt.label }, opt.value)))] })) : null, q.type === 'select' && q.options && shouldRenderCustomChoice(q) ? (_jsx(CustomChoiceInput, { label: q.customLabel ?? t('Something else'), value: customSingleValue(q, value), placeholder: q.customPlaceholder ?? t('Type your own answer'), disabled: locked, onChange: (next) => update(q.id, next) })) : null, q.type === 'text' ? _jsx("input", { type: "text", className: "qf-input", value: typeof value === 'string' ? value : '', placeholder: q.placeholder, disabled: locked, onChange: (e) => update(q.id, e.target.value) }) : null, q.type === 'number' ? _jsx("input", { type: "number", className: "qf-input", value: typeof value === 'string' ? value : '', placeholder: q.placeholder, min: q.min, max: q.max, step: q.step, disabled: locked, onChange: (e) => update(q.id, e.target.value) }) : null, q.type === 'range' ? (_jsxs("div", { className: "qf-range-wrap", children: [_jsx("input", { type: "range", className: "qf-range", value: typeof value === 'string' && value.trim() ? value : String(q.min ?? 0), min: q.min, max: q.max, step: q.step, disabled: locked, onChange: (e) => update(q.id, e.target.value) }), _jsx("output", { className: "qf-range-value", children: typeof value === 'string' && value.trim() ? value : String(q.min ?? 0) })] })) : null, q.type === 'date' || q.type === 'time' || q.type === 'datetime-local' ? _jsx("input", { type: q.type, className: "qf-input", value: typeof value === 'string' ? value : '', placeholder: q.placeholder, disabled: locked, onChange: (e) => update(q.id, e.target.value) }) : null, q.type === 'color' ? _jsx("input", { type: "color", className: "qf-color", value: normalizeColorInputValue(value), disabled: locked, onChange: (e) => update(q.id, e.target.value) }) : null, q.type === 'url' || q.type === 'email' || q.type === 'tel' ? _jsx("input", { type: q.type, className: "qf-input", value: typeof value === 'string' ? value : '', placeholder: q.placeholder, disabled: locked, onChange: (e) => update(q.id, e.target.value) }) : null, q.type === 'file' ? (_jsxs("div", { className: "qf-file-wrap", children: [_jsx("input", { type: "file", className: "qf-file", multiple: q.multiple, accept: q.accept, disabled: locked, onChange: (e) => {
+                                }) })) : null, q.type === 'checkbox' && q.options && shouldRenderCustomChoice(q) ? (_jsx(CustomChoiceInput, { label: q.customLabel ?? t('Something else'), value: customCheckboxValue(q, value), placeholder: q.customPlaceholder ?? t('Type your own answer'), disabled: locked, onChange: (next) => updateCheckboxCustom(q, next) })) : null, q.type === 'select' && q.options ? (_jsxs("select", { className: "qf-select", value: typeof value === 'string' && questionValueIsKnown(q, value) ? value : '', disabled: locked, onChange: (e) => update(q.id, e.target.value), children: [_jsx("option", { value: "", disabled: true, children: q.placeholder ?? t('Choose one') }), q.options.map((opt) => (_jsx("option", { value: opt.value, title: opt.description, children: opt.label }, opt.value)))] })) : null, q.type === 'select' && q.options && shouldRenderCustomChoice(q) ? (_jsx(CustomChoiceInput, { label: q.customLabel ?? t('Something else'), value: customSingleValue(q, value), placeholder: q.customPlaceholder ?? t('Type your own answer'), disabled: locked, onChange: (next) => update(q.id, next) })) : null, q.type === 'text' ? _jsx("input", { ...questionTextInputProps({ question: q }), className: "qf-input", value: typeof value === 'string' ? value : '', placeholder: q.placeholder, disabled: locked, onChange: (e) => update(q.id, e.target.value) }) : null, q.type === 'number' ? _jsx("input", { type: "number", className: "qf-input", value: typeof value === 'string' ? value : '', placeholder: q.placeholder, min: q.min, max: q.max, step: q.step, disabled: locked, onChange: (e) => update(q.id, e.target.value) }) : null, q.type === 'range' ? (_jsxs("div", { className: "qf-range-wrap", children: [_jsx("input", { type: "range", className: "qf-range", value: typeof value === 'string' && value.trim() ? value : String(q.min ?? 0), min: q.min, max: q.max, step: q.step, disabled: locked, onChange: (e) => update(q.id, e.target.value) }), _jsx("output", { className: "qf-range-value", children: typeof value === 'string' && value.trim() ? value : String(q.min ?? 0) })] })) : null, q.type === 'date' || q.type === 'time' || q.type === 'datetime-local' ? _jsx("input", { type: q.type, className: "qf-input", value: typeof value === 'string' ? value : '', placeholder: q.placeholder, disabled: locked, onChange: (e) => update(q.id, e.target.value) }) : null, q.type === 'color' ? _jsx("input", { type: "color", className: "qf-color", value: normalizeColorInputValue(value), disabled: locked, onChange: (e) => update(q.id, e.target.value) }) : null, q.type === 'url' || q.type === 'email' || q.type === 'tel' ? _jsx("input", { type: q.type, className: "qf-input", value: typeof value === 'string' ? value : '', placeholder: q.placeholder, disabled: locked, onChange: (e) => update(q.id, e.target.value) }) : null, q.type === 'file' ? (_jsxs("div", { className: "qf-file-wrap", children: [_jsx("input", { type: "file", className: "qf-file", multiple: q.multiple, accept: q.accept, disabled: locked, onChange: (e) => {
                                             const files = Array.from(e.target.files ?? []);
                                             const names = files.map((file) => file.name);
                                             setFileAnswers((current) => ({ ...current, [q.id]: files }));
                                             update(q.id, q.multiple ? names : (names[0] ?? ''));
-                                        } }), fileValueLabel(value) ? _jsx("div", { className: "qf-file-summary", children: fileValueLabel(value) }) : null] })) : null, q.type === 'switch' ? (_jsxs("label", { className: "qf-switch", children: [_jsx("input", { type: "checkbox", role: "switch", checked: value === 'true', disabled: locked, onChange: (e) => update(q.id, e.target.checked ? 'true' : 'false') }), _jsx("span", { "aria-hidden": true })] })) : null, q.type === 'textarea' ? _jsx("textarea", { className: "qf-textarea", value: typeof value === 'string' ? value : '', placeholder: q.placeholder, disabled: locked, rows: 3, onChange: (e) => update(q.id, e.target.value) }) : null, q.type === 'direction-cards' && q.cards && q.cards.length > 0 ? (_jsx("div", { className: "qf-direction-cards", children: q.cards.map((card) => (_jsx(DirectionCardView, { card: card, formId: form.id, questionId: q.id, selected: value === card.id || value === card.label, disabled: locked, onSelect: () => update(q.id, card.id) }, card.id))) })) : null, q.type === 'direction-cards' && q.cards && q.cards.length > 0 && shouldRenderCustomChoice(q) ? (_jsx(CustomChoiceInput, { label: q.customLabel ?? t('Something else'), value: customSingleValue(q, value), placeholder: q.customPlaceholder ?? t('Type your own answer'), disabled: locked, onChange: (next) => update(q.id, next) })) : null] }, q.id));
-                }) }), hideInternalSubmit ? null : (_jsxs("div", { className: "question-form-foot", children: [locked ? _jsx("span", { className: "qf-locked-note", children: submittedAnswers ? t('You answered this') : t('A newer message answered this') }) : _jsx("span", { className: "qf-hint", children: t('Answer above, then continue') }), !locked ? (_jsx("button", { type: "button", className: "primary", onClick: handleSubmit, disabled: !ready, title: ready ? t('Submit your answers') : t('Answer the required questions first'), children: form.submitLabel ?? t('Continue') })) : null] }))] }));
+                                        } }), fileValueLabel(value) ? _jsx("div", { className: "qf-file-summary", children: fileValueLabel(value) }) : null] })) : null, q.type === 'switch' ? (_jsxs("label", { className: "qf-switch", children: [_jsx("input", { type: "checkbox", role: "switch", checked: value === 'true', disabled: locked, onChange: (e) => update(q.id, e.target.checked ? 'true' : 'false') }), _jsx("span", { "aria-hidden": true })] })) : null, q.type === 'textarea' ? _jsx("textarea", { ...questionTextareaProps({ question: q }), className: "qf-textarea", value: typeof value === 'string' ? value : '', placeholder: q.placeholder, disabled: locked, rows: 3, onChange: (e) => update(q.id, e.target.value) }) : null, q.type === 'direction-cards' && q.cards && q.cards.length > 0 ? (_jsx("div", { className: "qf-direction-cards", children: q.cards.map((card) => (_jsx(DirectionCardView, { card: card, formId: form.id, questionId: q.id, selected: value === card.id || value === card.label, disabled: locked, onSelect: () => update(q.id, card.id) }, card.id))) })) : null, q.type === 'direction-cards' && q.cards && q.cards.length > 0 && shouldRenderCustomChoice(q) ? (_jsx(CustomChoiceInput, { label: q.customLabel ?? t('Something else'), value: customSingleValue(q, value), placeholder: q.customPlaceholder ?? t('Type your own answer'), disabled: locked, onChange: (next) => update(q.id, next) })) : null] }, q.id));
+                }) }), guard.secretRedacted ? _jsx("div", { role: "status", children: t(SECRET_REDACTED_NOTICE) }) : null, hideInternalSubmit ? null : (_jsxs("div", { className: "question-form-foot", children: [locked ? _jsx("span", { className: "qf-locked-note", children: submittedAnswers ? t('You answered this') : t('A newer message answered this') }) : _jsx("span", { className: "qf-hint", children: t('Answer above, then continue') }), !locked ? (_jsx("button", { type: "button", className: "primary", onClick: handleSubmit, disabled: !ready, title: ready ? t('Submit your answers') : t('Answer the required questions first'), children: form.submitLabel ?? t('Continue') })) : null] }))] }));
 });
 function OptionCopy({ option }) {
     return (_jsxs("span", { className: "qf-chip-copy", children: [_jsx("span", { children: option.label }), option.description ? _jsx("span", { className: "qf-chip-desc", children: option.description }) : null] }));

package/dist/react/components/QuestionsPanel.d.ts

@@ -1,5 +1,6 @@
+import type { UserTextRedactionOptions } from '../../core/user-text-redaction.js';
 import type { QuestionForm as QuestionFormType } from '../../core/index.js';
-export interface QuestionsPanelProps {
+export interface QuestionsPanelProps extends UserTextRedactionOptions {
     form: QuestionFormType | null;
     interactive: boolean;
     /** Disables Continue/Skip while the turn is busy, without locking the form itself. */
@@ -9,5 +10,5 @@ export interface QuestionsPanelProps {
     generating?: boolean;
     onSubmit: (text: string, answers: Record<string, string | string[]>) => void;
 }
-export declare function QuestionsPanel({ form, interactive, submitDisabled, submittedAnswers, generating, onSubmit }: QuestionsPanelProps): import("react").JSX.Element | null;
+export declare function QuestionsPanel({ form, interactive, submitDisabled, submittedAnswers, generating, onSubmit, redactUserText, onSecretRedacted }: QuestionsPanelProps): import("react").JSX.Element | null;
 //# sourceMappingURL=QuestionsPanel.d.ts.map

package/dist/react/components/QuestionsPanel.js

@@ -20,7 +20,7 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { useRef, useState } from 'react';
 import { useT } from '../hooks/context.js';
 import { QuestionForm } from './QuestionForm.js';
-export function QuestionsPanel({ form, interactive, submitDisabled = false, submittedAnswers, generating = false, onSubmit }) {
+export function QuestionsPanel({ form, interactive, submitDisabled = false, submittedAnswers, generating = false, onSubmit, redactUserText, onSecretRedacted }) {
     const t = useT();
     const formRef = useRef(null);
     const [ready, setReady] = useState(false);
@@ -28,6 +28,6 @@ export function QuestionsPanel({ form, interactive, submitDisabled = false, subm
         return null;
     const answered = submittedAnswers !== undefined;
     const busy = submitDisabled || generating;
-    return (_jsxs("div", { className: "qp-panel", children: [_jsx(QuestionForm, { ref: formRef, form: form, interactive: interactive, ...(submittedAnswers !== undefined ? { submittedAnswers } : {}), hideInternalSubmit: true, onReadyChange: setReady, onSubmit: onSubmit }), !answered ? (_jsxs("div", { className: "qp-foot", children: [generating ? _jsx("span", { className: "qp-hint", children: t('Still generating…') }) : null, _jsx("button", { type: "button", className: "qp-skip", disabled: busy, onClick: () => formRef.current?.skipAll(), children: t('Skip') }), _jsx("button", { type: "button", className: "qp-continue primary", disabled: busy || !ready, onClick: () => formRef.current?.submit(), children: t('Continue') })] })) : null] }));
+    return (_jsxs("div", { className: "qp-panel", children: [_jsx(QuestionForm, { ref: formRef, form: form, interactive: interactive, ...(submittedAnswers !== undefined ? { submittedAnswers } : {}), hideInternalSubmit: true, ...(redactUserText ? { redactUserText } : {}), ...(onSecretRedacted ? { onSecretRedacted } : {}), onReadyChange: setReady, onSubmit: onSubmit }), !answered ? (_jsxs("div", { className: "qp-foot", children: [generating ? _jsx("span", { className: "qp-hint", children: t('Still generating…') }) : null, _jsx("button", { type: "button", className: "qp-skip", disabled: busy, onClick: () => formRef.current?.skipAll(), children: t('Skip') }), _jsx("button", { type: "button", className: "qp-continue primary", disabled: busy || !ready, onClick: () => formRef.current?.submit(), children: t('Continue') })] })) : null] }));
 }
 //# sourceMappingURL=QuestionsPanel.js.map

package/dist/react/features/chat-pane/agent-tools.d.ts

@@ -1,4 +1,4 @@
-import { type CapabilityDef, type CapabilityInputSchema, type CapabilityRisk } from '@jini-ai/agentic';
+import type { CapabilityDef, CapabilityInputSchema, CapabilityRisk } from '@jini-ai/agentic';
 /** @deprecated Use `CapabilityRisk` from `@jini-ai/agentic`. */
 export type ChatPaneAgentToolRisk = CapabilityRisk;
 /** @deprecated Use `CapabilityInputSchema` from `@jini-ai/agentic`. */

package/dist/react/features/chat-pane/agent-tools.js

@@ -12,7 +12,6 @@
  * `@jini-ai/agentic` directly.
  */
 import { CHAT_CAPABILITIES } from '@jini-ai/chat';
-import {} from '@jini-ai/agentic';
 /**
  * The bounded, explicit set of chat-pane capabilities every transport surface hosts.
  *

package/dist/react/features/chat-pane/components/AgentRuntimePicker.js

@@ -1,4 +1,5 @@
 import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
+import { pickerModelValue, pickerCatalogNote, pickerModelOptions } from '../model-options.js';
 import { createPortal } from 'react-dom';
 import { AgentIcon, RemixIcon, SearchableModelSelect } from '@jini-ai/ui';
 import { useT } from '../../../hooks/context.js';
@@ -30,11 +31,13 @@ function RuntimeAgentList({ orderedAgents, value, onChange, agentIconBasePath, t
 function RuntimeModelSelects({ selectedAgent, value, onChange, t }) {
     if (!selectedAgent)
         return null;
-    return (_jsxs("div", { className: "jini-runtime-models", children: [(selectedAgent.models?.length ?? 0) > 0 ? (_jsxs("label", { className: "jini-runtime-select", children: [_jsx("span", { children: t('Model') }), _jsx("select", { "aria-label": t('Model'), value: value.model ?? '', onChange: (event) => onChange({
+    const models = pickerModelOptions(selectedAgent);
+    const note = pickerCatalogNote(selectedAgent, t);
+    return (_jsxs("div", { className: "jini-runtime-models", children: [note ? _jsx("small", { children: note }) : null, models.length > 0 ? (_jsxs("label", { className: "jini-runtime-select", children: [_jsx("span", { children: t('Model') }), _jsxs("select", { "aria-label": t('Model'), value: pickerModelValue(selectedAgent, value.model), onChange: (event) => onChange({
                             agentId: value.agentId,
                             model: event.target.value,
                             ...(value.reasoning ? { reasoning: value.reasoning } : {}),
-                        }), children: selectedAgent.models?.map((model) => (_jsx("option", { value: model.id, children: model.label }, model.id))) })] })) : null, (selectedAgent.reasoningOptions?.length ?? 0) > 0 ? (_jsxs("label", { className: "jini-runtime-select", children: [_jsx("span", { children: t('Reasoning') }), _jsx("select", { "aria-label": t('Reasoning'), value: value.reasoning ?? '', onChange: (event) => onChange({
+                        }), children: [_jsx("option", { value: "", disabled: true, children: t('Choose model') }), models.map((model) => (_jsx("option", { value: model.id, children: model.label }, model.id)))] })] })) : null, (selectedAgent.reasoningOptions?.length ?? 0) > 0 ? (_jsxs("label", { className: "jini-runtime-select", children: [_jsx("span", { children: t('Reasoning') }), _jsx("select", { "aria-label": t('Reasoning'), value: value.reasoning ?? '', onChange: (event) => onChange({
                             agentId: value.agentId,
                             ...(value.model ? { model: value.model } : {}),
                             reasoning: event.target.value,

package/dist/react/features/chat-pane/components/ChatPane.d.ts

@@ -6,5 +6,5 @@ import type { ChatPaneProps } from '../types.js';
  * @complexity Time/space: O(n) in rendered messages, agents, and suggestions.
  * @overallScore 100/100
  */
-export declare function ChatPane({ transport, agents: injectedAgents, runtimeAccess, runtimeStatusPollMs, title, variant, initialMessages, conversationId, initialSelection, selection: controlledSelection, onSelectionChange, runContext, agentControl, onActivityChange, onMessagesChange, onRescanAgents, scanningAgents, daemonOnline, executionMode, apiModeAvailable, onExecutionModeChange, byokRuntime, onByokModelChange, initialDraft, composerHistoryScope, composerHistoryStorage, validateAttachments, deliverTypedAnswer, composerHandle, placeholder, placeholders, suggestions, workingDirectory, initialWorkingDirectory, onChangeWorkingDirectory, workingDirectoryAccess, workingDirectoryControlPlacement, projectFileNames, uploadAttachments, attachmentAccept, disabled, runtimePickerPlacement, composerSlots, header, leadingAccessory, footer, className, style, }: ChatPaneProps): import("react").JSX.Element;
+export declare function ChatPane({ transport, agents: injectedAgents, runtimeAccess, runtimeStatusPollMs, title, variant, initialMessages, conversationId, initialSelection, selection: controlledSelection, onSelectionChange, runContext, agentControl, onActivityChange, onMessagesChange, redactUserText, onSecretRedacted, onRescanAgents, scanningAgents, daemonOnline, executionMode, apiModeAvailable, onExecutionModeChange, byokRuntime, onByokModelChange, initialDraft, composerHistoryScope, composerHistoryStorage, validateAttachments, deliverTypedAnswer, composerHandle, placeholder, placeholders, suggestions, workingDirectory, initialWorkingDirectory, onChangeWorkingDirectory, workingDirectoryAccess, workingDirectoryControlPlacement, projectFileNames, uploadAttachments, attachmentAccept, disabled, runtimePickerPlacement, composerSlots, header, leadingAccessory, footer, className, style, }: ChatPaneProps): import("react").JSX.Element;
 //# sourceMappingURL=ChatPane.d.ts.map

package/dist/react/features/chat-pane/components/ChatPane.js

@@ -1,4 +1,5 @@
 import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
+import { SECRET_REDACTED_NOTICE } from '../../../../core/user-text-redaction.js';
 import { useEffect, useRef } from 'react';
 import { WorkingDirPicker } from '@jini-ai/ui';
 import { Composer } from '../../../components/Composer.js';
@@ -178,7 +179,7 @@ function ChatPaneComposerArea({ fileDrop, uploadAttachments, pane, disabled, una
  * @complexity Time/space: O(n) in rendered messages, agents, and suggestions.
  * @overallScore 100/100
  */
-export function ChatPane({ transport, agents: injectedAgents = EMPTY_AGENTS, runtimeAccess, runtimeStatusPollMs = 5_000, title, variant = 'workspace', initialMessages, conversationId, initialSelection, selection: controlledSelection, onSelectionChange, runContext, agentControl, onActivityChange, onMessagesChange, onRescanAgents, scanningAgents = false, daemonOnline = true, executionMode = 'local', apiModeAvailable = false, onExecutionModeChange, byokRuntime, onByokModelChange, initialDraft, composerHistoryScope, composerHistoryStorage, validateAttachments, deliverTypedAnswer, composerHandle, placeholder, placeholders, suggestions = [], workingDirectory, initialWorkingDirectory, onChangeWorkingDirectory, workingDirectoryAccess, workingDirectoryControlPlacement = 'below', projectFileNames, uploadAttachments, attachmentAccept, disabled = false, runtimePickerPlacement = 'up', composerSlots, header, leadingAccessory, footer, className, style, }) {
+export function ChatPane({ transport, agents: injectedAgents = EMPTY_AGENTS, runtimeAccess, runtimeStatusPollMs = 5_000, title, variant = 'workspace', initialMessages, conversationId, initialSelection, selection: controlledSelection, onSelectionChange, runContext, agentControl, onActivityChange, onMessagesChange, redactUserText, onSecretRedacted, onRescanAgents, scanningAgents = false, daemonOnline = true, executionMode = 'local', apiModeAvailable = false, onExecutionModeChange, byokRuntime, onByokModelChange, initialDraft, composerHistoryScope, composerHistoryStorage, validateAttachments, deliverTypedAnswer, composerHandle, placeholder, placeholders, suggestions = [], workingDirectory, initialWorkingDirectory, onChangeWorkingDirectory, workingDirectoryAccess, workingDirectoryControlPlacement = 'below', projectFileNames, uploadAttachments, attachmentAccept, disabled = false, runtimePickerPlacement = 'up', composerSlots, header, leadingAccessory, footer, className, style, }) {
     const t = useT();
     const composerPlaceholder = useChatPaneComposerPlaceholder({ placeholder: placeholder, placeholders: placeholders });
     const inventory = useChatPaneRuntimeInventory(definedProps({ source: {
@@ -207,6 +208,8 @@ export function ChatPane({ transport, agents: injectedAgents = EMPTY_AGENTS, run
             uploadAttachments,
             onActivityChange,
             onMessagesChange,
+            redactUserText,
+            onSecretRedacted,
             workingDirectory,
             initialWorkingDirectory,
             onChangeWorkingDirectory,
@@ -265,6 +268,6 @@ export function ChatPane({ transport, agents: injectedAgents = EMPTY_AGENTS, run
             footerAccessories: (_jsx(AgentRuntimePicker, { agents: runtimeView.agents, value: pane.selection, onChange: pane.setSelection, ...definedProps({ source: { onRescan: runtimeView.rescanAgents } }), scanning: runtimeView.scanningAgents, daemonOnline: runtimeView.daemonOnline, placement: runtimePickerPlacement, executionMode: executionMode, apiModeAvailable: apiModeAvailable, ...definedProps({ source: { onExecutionModeChange, byokRuntime, onByokModelChange } }) })),
         } });
     const { rootRef, controlsRef } = useChatPaneControlsHeight();
-    return (_jsxs("section", { className: chatPaneClassName(variant, className), style: style, "data-activity": pane.activity, ref: rootRef, children: [_jsx("style", { "data-jini-chat-pane-styles": "true", children: CHAT_PANE_STYLES }), resolveChatPaneHeader(header, title, pane.reset, t), _jsxs("div", { className: "jini-chat-pane__body", children: [_jsx(MessageList, { messages: pane.conversation.messages, isStreaming: pane.conversation.isStreaming, scrollIntent: pane.conversation.scrollIntent, onScrolled: pane.conversation.acknowledgeScroll, pendingPrompt: pane.queuedPrompt === null ? null : { text: pane.queuedPrompt, onCancel: pane.cancelQueued }, ...(projectFileNames === undefined ? {} : { projectFileNames: new Set(projectFileNames) }) }), _jsxs("div", { className: "jini-chat-pane__controls", ref: controlsRef, children: [_jsx(ChatPaneSuggestionsRow, { suggestions: suggestions, onSelect: pane.composer.setDraft, t: t }), _jsx(ChatPaneStatusMessages, { unavailable: unavailable, scanningAgents: runtimeView.scanningAgents, connectingAgents: runtimeView.connectingAgents, executionMode: executionMode, apiModeAvailable: apiModeAvailable, onExecutionModeChange: onExecutionModeChange, conversationError: pane.conversation.error, attachmentError: pane.attachmentError, dropReadError: fileDrop.dropReadError, workingDirectoryError: pane.workingDirectoryError, workingDirectoryPending: pane.workingDirectoryPending, workingDirectoryInvalid: pane.workingDirectoryInvalid, runtimeInventoryError: inventory.runtimeInventoryError, typedAnswerNotice: pane.typedAnswerNotice, onSendAsNewMessage: () => void pane.sendAsNewMessage(), t: t }), _jsx(ChatPaneComposerArea, { fileDrop: fileDrop, uploadAttachments: uploadAttachments, pane: pane, disabled: disabled, unavailable: unavailable, placeholder: composerPlaceholder, slots: slots, attachmentAccept: attachmentAccept, workingDirectoryAccess: workingDirectoryAccess, workingDirectoryControlPlacement: workingDirectoryControlPlacement, t: t })] })] }), footer] }));
+    return (_jsxs("section", { className: chatPaneClassName(variant, className), style: style, "data-activity": pane.activity, ref: rootRef, children: [_jsx("style", { "data-jini-chat-pane-styles": "true", children: CHAT_PANE_STYLES }), resolveChatPaneHeader(header, title, pane.reset, t), _jsxs("div", { className: "jini-chat-pane__body", children: [_jsx(MessageList, { messages: pane.conversation.messages, isStreaming: pane.conversation.isStreaming, scrollIntent: pane.conversation.scrollIntent, onScrolled: pane.conversation.acknowledgeScroll, pendingPrompt: pane.queuedPrompt === null ? null : { text: pane.queuedPrompt, onCancel: pane.cancelQueued }, ...(projectFileNames === undefined ? {} : { projectFileNames: new Set(projectFileNames) }) }), _jsxs("div", { className: "jini-chat-pane__controls", ref: controlsRef, children: [_jsx(ChatPaneSuggestionsRow, { suggestions: suggestions, onSelect: pane.composer.setDraft, t: t }), pane.secretRedacted ? _jsx("div", { className: "jini-chat-pane__notice", role: "status", children: t(SECRET_REDACTED_NOTICE) }) : null, _jsx(ChatPaneStatusMessages, { unavailable: unavailable, scanningAgents: runtimeView.scanningAgents, connectingAgents: runtimeView.connectingAgents, executionMode: executionMode, apiModeAvailable: apiModeAvailable, onExecutionModeChange: onExecutionModeChange, conversationError: pane.conversation.error, attachmentError: pane.attachmentError, dropReadError: fileDrop.dropReadError, workingDirectoryError: pane.workingDirectoryError, workingDirectoryPending: pane.workingDirectoryPending, workingDirectoryInvalid: pane.workingDirectoryInvalid, runtimeInventoryError: inventory.runtimeInventoryError, typedAnswerNotice: pane.typedAnswerNotice, onSendAsNewMessage: () => void pane.sendAsNewMessage(), t: t }), _jsx(ChatPaneComposerArea, { fileDrop: fileDrop, uploadAttachments: uploadAttachments, pane: pane, disabled: disabled, unavailable: unavailable, placeholder: composerPlaceholder, slots: slots, attachmentAccept: attachmentAccept, workingDirectoryAccess: workingDirectoryAccess, workingDirectoryControlPlacement: workingDirectoryControlPlacement, t: t })] })] }), footer] }));
 }
 //# sourceMappingURL=ChatPane.js.map

package/dist/react/features/chat-pane/create-typed-answer-poster.d.ts

@@ -26,8 +26,9 @@
  * new run: 202 delivered it; 409 means nothing is waiting any more (answered, expired, or never
  * open); anything else is a failure the human can retry. A rejection would collapse the last two.
  */
+import { type UserTextRedactionOptions } from '../../../core/user-text-redaction.js';
 import type { DeliverTypedAnswer } from './types.js';
-export interface CreateTypedAnswerPosterOptions {
+export interface CreateTypedAnswerPosterOptions extends UserTextRedactionOptions {
     /** Path appended to `baseUrl`. Defaults to `/api/mcp-ui/tool-calls`, as for `createMcpUiToolCaller`. */
     readonly path?: string;
     /** Abandon a post after this many ms (reported as `'failed'`). Defaults to 30s. */

package/dist/react/features/chat-pane/create-typed-answer-poster.js

@@ -1,3 +1,32 @@
+/**
+ * @module create-typed-answer-poster
+ *
+ * The client half of a typed answer: a ready-made {@link DeliverTypedAnswer} that posts text the
+ * human typed into the composer to the MCP-UI tool-call route, for the question a running agent is
+ * holding open. Pass it as `ChatPane`'s `deliverTypedAnswer`.
+ *
+ * ```tsx
+ * <ChatPane deliverTypedAnswer={createTypedAnswerPoster({ baseUrl: '', fetch, toolName: 'ask_choice' })} />
+ * ```
+ *
+ * Sibling of `create-mcp-ui-tool-caller.ts`, and the same wire shape: `{toolName, params}` to the
+ * same route. The difference is what the params carry and what the caller needs back.
+ *
+ * ## Why the body names no exchange
+ *
+ * A human typing into the composer has never seen an exchange id; the only client-side copy lives
+ * inside the surface's own (model-influenced, sandboxed) HTML. So the body carries only the tool and
+ * the text under {@link TYPED_ANSWER_PARAM}, and the server resolves which open exchange — for that
+ * tool and the request's own authenticated principal — the answer is for (`@jini-ai/daemon`'s
+ * `findTypedAnswerTarget`).
+ *
+ * ## Why it resolves an outcome instead of throwing
+ *
+ * The pane must tell three cases apart and act differently on each, never by queueing the text as a
+ * new run: 202 delivered it; 409 means nothing is waiting any more (answered, expired, or never
+ * open); anything else is a failure the human can retry. A rejection would collapse the last two.
+ */
+import { redactUserText } from '../../../core/user-text-redaction.js';
 /**
  * The params key a typed answer travels under. Spelled here rather than imported because this
  * browser package cannot depend on `@jini-ai/daemon`, which owns the canonical
@@ -28,6 +57,9 @@ export function createTypedAnswerPoster({ baseUrl, fetch, toolName }, options =
     const endpoint = `${baseUrl.replace(/\/$/u, '')}${options.path ?? DEFAULT_PATH}`;
     const timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;
     const deliver = async ({ text }) => {
+        const result = (options.redactUserText ?? redactUserText)({ text });
+        if (result.secretRedacted)
+            options.onSecretRedacted?.({ secretRedacted: true, count: result.count });
         const controller = new AbortController();
         const timer = setTimeout(() => controller.abort(), timeoutMs);
         const outcome = await fetch(endpoint, {
@@ -35,7 +67,7 @@ export function createTypedAnswerPoster({ baseUrl, fetch, toolName }, options =
             // Same-origin cookie session: the human's own credentials authorize the answer.
             credentials: 'same-origin',
             headers: { ...options.headers, 'content-type': 'application/json' },
-            body: JSON.stringify({ toolName, params: { [TYPED_ANSWER_PARAM]: text } }),
+            body: JSON.stringify({ toolName, params: { [TYPED_ANSWER_PARAM]: result.text } }),
             signal: controller.signal,
         }).then((response) => deliveryFor(response.status), () => 'failed');
         clearTimeout(timer);